diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 360b807..e4c91a4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,10 +18,10 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0   # hatch-vcs derives the version from tags
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
       - run: uv python install 3.14
@@ -29,7 +29,7 @@ jobs:
       - run: uv sync --locked
       # Exactly the definition-of-done gate from AGENTS.md.
       - run: uv run poe check
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@v7
         if: matrix.os == 'ubuntu-latest'
         with:
           files: build/coverage/coverage.xml
@@ -43,10 +43,10 @@ jobs:
     name: tests (Windows)
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
       - run: uv python install 3.14
@@ -60,10 +60,10 @@ jobs:
     name: tests (Python 3.12, lowest dependencies)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v7
       - run: uv venv --python 3.12
       - run: uv pip install --resolution lowest-direct -e ".[gas]"
       - run: uv pip install pytest pytest-xdist pytest-randomly hypothesis beartype matplotlib sphinx
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0a21172..05d7801 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,10 +20,10 @@ jobs:
       id-token: write   # the OIDC token that PyPI's trusted publishing exchanges
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0   # hatch-vcs derives the version from the tag
-      - uses: astral-sh/setup-uv@v6
+      - uses: astral-sh/setup-uv@v7
       - run: uv python install 3.14
       - name: Build the sdist and the wheel
         run: uv build